MCP servers tagged cwe
14 live MCP servers tagged "cwe", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with cwe.
Fetch Cwe List
MCP (Model Context Protocol) server exposing fetch-cwe-list tools for LLM agents. Experimental/alpha — APIs may change.
Eslint Plugin MCP SDK Security
ESLint plugin for Model Context Protocol (MCP) SDK security — catches tools registered without an input schema, handlers reading arguments the schema never declared, model-visible…
VulnMCP
A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.
Security Framework MCP
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
Mycop
Scan and fix vulnerabilities in Python, JavaScript, TypeScript, Go, and Java code using AI-powered analysis with 200 built-in security rules.
Agenticqa Scan Action
Analyze AI codebases to identify integration points, security risks, and test coverage gaps in one step with comprehensive reports.
Threat Intelligence Pipeline
Correlates every NVD CVE with CWE, CAPEC, ATT&CK, D3FEND, OWASP, CISA KEV, Vulnrichment SSVC, and EPSS, with APT links only where MITRE ATT&CK cites the CVE. Search-first web app,…
Vakt
Open-source AST aware code scanner to find your app’s vulnerabilities.
CodeSkeptic
Precision-first C/C++ static analyzer on Clang LibTooling — catches the null-derefs, leaks and overflows your compiler waves through, each with a dataflow trace. MCP-ready for the…
Qanvuli
Local vulnerability database and scanner for CVE, OSV, CWE, CAPEC, KEV and EPSS — CLI, TUI and MCP.
React Native Security Toolkit
Mobile security toolkit for React Native: runtime root/jailbreak, debugger, hooking and integrity checks on Android and iOS, a static auditor with OWASP MASVS/CWE mappings and SAR…
Payload Entropy Studio
Multi-Vector Threat Analyzer, Shannon Entropy Profiler, Recursive De-obfuscator, and Studio (design influenced by Material 3)
ThreatModel
Open-source, MCP-first threat modeling that proposes and sandbox-validates the fix — not just the report. Apache-2.0."
Agenticqa Scan Action
Analyze AI codebases to identify integration points, security risks, and test coverage gaps in one step with comprehensive reports.